|
soul^keeper |
  |
Administrateur
Déconnecté
Niveau : 5
N° de Membre :
1
Ancienneté : 100%
Participation : 19%
Inscription: 22 Feb 2002
Localisation: La Défense
Age: 48
Messages: 16623
Sujets Lancés : 2412
|
[SECURITE] Faille Kernel Linux : Crash possible avec un simple ping !
Citation:
[Dailydave] Fun with Linux (2.6.12 -> 2.6.15.2)
From: H D Moore (hdm-daily-davedigitaloffense.net)
Date: Tue Feb 07 2006 - 11:39:36 CST
--------------------------------------------------------------------------------
A fun remote DoS was fixed today. The bug occurs when the kernel tries to
respond to an ICMP packet and the ip_options_echo() function fails.
So far, it seems like the two ways to trigger this are via record-route
and timestamp IP options that have needaddr bit set and a truncated
value. The easy fix is to block ICMP until you upgrade your kernels...
http://www.kernel.org/diff/diffview...6.15.3.bz2;z=27
Add the recent FreeBSD SACK bug, the various Windows driver bugs, and some
magic OS X 0day and you can keep your entire local network staring at
crash dump screens indefinitely...
-HD
|
Source: http://archives.neohapsis.com/archi...06-q1/0124.html
Signaler ce message à un modérateur | IP: Logguée
Temps en ligne : 92 Jours, 20 Heures, 31 Minutes, 0 Seconde en ligne
|
16-02-2006 10:56
